Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 371 of 437.
- CVE-2022-24756 Missing Release of Memory after Effective Lifetime in Bareos Director
- CVE-2022-24755 Incorrect Authorization in Bareos Director
- CVE-2022-24754 Buffer overflow in pjsip
- CVE-2022-24753 Code injection in Stripe CLI on windows
- CVE-2022-24752 SQL Injection through sorting parameters in SyliusGridBundle
- CVE-2022-24751 Race condition in Zulip
- CVE-2022-24750 Low privilege user is able to exploit the service and gain SYSTEM privileges in UltraVNC server
- CVE-2022-2475 Missing authorization in Haas CNC Controller
- CVE-2022-24749 Basic Cross-site Scripting and Unrestricted Upload of File with Dangerous Type in Sylius
- CVE-2022-24748 Incorrect Authentication in shopware
- CVE-2022-24747 HTTP caching is marking private HTTP headers as public
- CVE-2022-24746 HTML injection possibility in voucher code form
- CVE-2022-24745 Guest session is shared between customers in shopware
- CVE-2022-24744 Insufficient Session Expiration in shopware
- CVE-2022-24743 Insufficient Session Expiration in Sylius
- CVE-2022-24742 Exposure of Sensitive Information Due to Incompatible Policies in Sylius
- CVE-2022-24741 High memory usage in Nextcloud server
- CVE-2022-24740 Improper Authentication in Volto
- CVE-2022-2474 Auth bypass in Haas CNC Controller
- CVE-2022-24739 Server-Side Request Forgery (SSRF) and URL Redirection to Untrusted Site ('Open Redirect') in alltube
- CVE-2022-24738 Account compromise in Evmos
- CVE-2022-24737 Exposure of Sensitive Information to an Unauthorized Actor in httpie
- CVE-2022-24736 A Malformed Lua script can crash Redis
- CVE-2022-24735 Lua scripts can be manipulated to overcome ACL rules in Redis
- CVE-2022-24734 Remote code execution in mybb
- CVE-2022-24733 Improper Restriction of Rendered UI Layers or Frames in Sylius
- CVE-2022-24732 Maddy Mail Server does not implement account expiry
- CVE-2022-24731 Path traversal allows leaking out-of-bound files from Argo CD repo-server
- CVE-2022-24730 Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server
- CVE-2022-2473 WP-UserOnline <= 2.87.6 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2022-24729 Regular expression Denial of Service in dialog plugin
- CVE-2022-24728 Cross-site Scripting in CKEditor4
- CVE-2022-24726 Unauthenticated control plane denial of service attack in Istio
- CVE-2022-24725 Exposure of home directory through shescape on Unix with Bash
- CVE-2022-24724 Integer overflow in table parsing extension leads to heap memory corruption
- CVE-2022-24723 Improper Input Validation in URI.js
- CVE-2022-24722 Cross-site Scripting in view_component
- CVE-2022-24721 Incorrect Authorization in org.cometd.oort
- CVE-2022-24720 Improper Input Validation in image_processing
- CVE-2022-2472 Improper Initialization vulnerability in local server authentication logic
- CVE-2022-24719 Unauthorized forwarding of confidential headers in fluture-node
- CVE-2022-24718 Path Traversal in ssr-pages
- CVE-2022-24717 Cross Site Scripting (XSS) in ssr-pages
- CVE-2022-24716 Path traversal in Icinga Web 2
- CVE-2022-24715 Arbitrary code execution for authenticated users in Icinga Web 2
- CVE-2022-24714 Disclosure of hosts and related data, linked to decommissioned services in Icinga Web 2
- CVE-2022-24713 Regular expression denial of service in Rust's regex crate
- CVE-2022-24712 Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4
- CVE-2022-24711 Remote CLI Command Execution Vulnerability in CodeIgniter4
- CVE-2022-24710 Cross-site Scripting in Weblate
- CVE-2022-2471 Stack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection component
- CVE-2022-24709 Cross site scripting in @awsui/components-react
- CVE-2022-24708 Stored XSS vulnerability in anuko/timetracker
- CVE-2022-24707 SQL injection in anuko timetracker
- CVE-2022-24706 Apache CouchDB Insecure Default Initialization of Resource
- CVE-2022-24705 Buffer Overflow via Crafted Ipv6 Prefix Attribute Type Client Request in accel-ppp v1.12
- CVE-2022-24704 Buffer Overflow via Crafted IPv6 Addr Attribute Type Client Request in Accel-PPP v1.12
- CVE-2022-24702 Memory corruption in winaprs:winaprs
- CVE-2022-24701 Memory corruption in winaprs:winaprs
- CVE-2022-24700 Memory corruption in winaprs:winaprs
- CVE-2022-2470 Cross-site Scripting (XSS) - Reflected in microweber/microweber
- CVE-2022-24697 Apache Kylin vulnerable to remote code execution
- CVE-2022-24696 Privilege escalation in mirametrix:glance
- CVE-2022-24695 Information disclosure in bluetooth:bluetooth core specification
- CVE-2022-24694 Information disclosure in mahara:mahara
- CVE-2022-24693 Hardcoded credentials in baicells:neutrino 430 firmware
- CVE-2022-24692 Cross-site scripting in dsk:dsknet
- CVE-2022-24691 SQL injection in dsk:dsknet
- CVE-2022-24690 SQL injection in dsk:dsknet
- CVE-2022-2469 Memory corruption in GNU SASL
- CVE-2022-24689 Missing authorization in dsk:dsknet
- CVE-2022-24688 File upload in dsk:dsknet
- CVE-2022-24687 HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers
- CVE-2022-24686 HashiCorp Nomad Artifact Download Race Condition
- CVE-2022-24685 HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling
- CVE-2022-24684 Nomad Spread Job Stanza May Trigger Panic in Servers
- CVE-2022-24683 Arbitrary file reads in HashiCorp Nomad
- CVE-2022-24682 Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting
- CVE-2022-24681 Cross-site scripting in zohocorp:manageengine adselfservice plus
- CVE-2022-24680 Privilege escalation in Trend Micro Apex One
- CVE-2022-2468 SourceCodester Garage Management System editbrand.php sql injection
- CVE-2022-24679 Privilege escalation in Trend Micro Apex One
- CVE-2022-24678 Denial of service in Trend Micro Apex One
- CVE-2022-24677 Code injection in hyphp:hybbs2
- CVE-2022-24676 File upload in hyphp:hybbs2
- CVE-2022-24675 Denial of service in fedoraproject:fedora
- CVE-2022-24674 Memory corruption in imageCLASS MF644Cdw
- CVE-2022-24673 Memory corruption in imageCLASS MF644Cdw
- CVE-2022-24672 Memory corruption in imageCLASS MF644Cdw
- CVE-2022-24671 Privilege escalation in Trend Micro Antivirus for Mac
- CVE-2022-24670 Any user can run unrestricted LDAP queries against a configuration endpoint
- CVE-2022-2467 SourceCodester Garage Management System login.php sql injection
- CVE-2022-24669 Anonymous users can register / de-register for configuration change notifications
- CVE-2022-24668 swift-nio-http2 vulnerable to denial of service via ALTSVC or ORIGIN frames
- CVE-2022-24667 swift-nio-http2 vulnerable to denial of service via mishandled HPACK variable length integer encoding
- CVE-2022-24666 swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length
- CVE-2022-24665 Remote Code Execution by by Contributor+ users via WordPress gutenberg block
- CVE-2022-24664 Remote Code Execution by by Contributor+ users via WordPress metabox
- CVE-2022-24663 Remote Code Execution by Subscriber+ users via WordPress shortcode
- CVE-2022-24661 Memory corruption in Simcenter STAR-CCM+ Viewer